Lucene search

K
prionPRIOn knowledge basePRION:CVE-2015-5156
HistoryOct 19, 2015 - 10:59 a.m.

Buffer overflow

2015-10-1910:59:00
PRIOn knowledge base
www.prio-n.com
5

6.7 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

62.0%

The virtnet_probe function in drivers/net/virtio_net.c in the Linux kernel before 4.2 attempts to support a FRAGLIST feature without proper memory allocation, which allows guest OS users to cause a denial of service (buffer overflow and memory corruption) via a crafted sequence of fragmented packets.

CPENameOperatorVersion
linux_kernelle4.1.10

References